subfinder is a tool used for discovering subdomains of a given domain. It works by querying multiple sources and returning all discovered subdomains. It’s an essential tool for reconnaissance during penetration testing or red teaming.
Common subfinder Options:
- -silent: Suppresses all output except for the discovered subdomains.
- -recursive: Enables recursive subdomain discovery.
- -all: Uses all available sources for subdomain discovery.
Additional Option:
- -o [filename]: Specifies the file to save the output.
Examples of subfinder Commands:
Discover subdomains for example.com.
> subfinder -d example.comPerform recursive subdomain discovery for example.com.
> subfinder -d example.com -recursiveRun subfinder silently and save the results to output.txt.
> subfinder -d example.com -silent -o output.txt